$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab7e21f3-04aa-3cda-8a36-20b4225862e0.roa File: ab7e21f3-04aa-3cda-8a36-20b4225862e0.roa (raw, json) Hash identifier: 8NmkE9QjmBAH4GURRMM5wned4VETMTlmkcUE/OrM+Ns= Subject key identifier: 90:2A:B7:8A:A4:5A:76:6B:8B:05:91:E1:0C:A1:18:9A:83:D5:01:AE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F019D63EA66C827F16F2720 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab7e21f3-04aa-3cda-8a36-20b4225862e0.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.201.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:9d:63:ea:66:c8:27:f1:6f:27:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=400a9640-3881-4b0b-ab64-208fc02e6b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:97:f0:d0:4a:8a:1d:ac:27:fc:90:75:a1: f6:ed:66:b2:38:15:26:c7:bc:e9:fd:d2:8e:35:a2: 74:07:9c:8e:36:5b:4f:7d:75:01:58:00:1e:d8:a7: 78:c0:36:e8:85:d0:3b:dc:09:ca:37:62:b5:ab:83: b3:47:7d:ad:d3:90:c0:b5:10:73:c4:2a:4e:88:86: f9:77:07:f0:36:ee:11:69:3a:66:d2:3c:88:b6:1e: 62:d6:59:47:fe:86:c7:1a:3c:e7:b6:0c:56:45:9c: a6:d1:ca:05:87:16:f1:1f:48:1d:60:03:20:a5:82: 0e:13:16:d3:2c:67:c3:d2:af:ec:73:7a:b4:22:5f: b9:17:92:40:92:e3:a9:15:ed:9c:7b:f8:7f:56:a8: 6c:06:2a:f7:c6:d0:94:e5:87:98:10:98:61:32:f7: ed:d9:f9:c6:5f:78:ec:d6:b5:f3:7d:be:f9:35:42: d3:82:56:d3:fb:6f:68:cd:ae:50:77:ce:03:ba:68: ca:6e:66:e1:84:96:28:b8:7a:76:1a:54:f3:fd:b5: 8b:c8:47:07:f3:10:5e:10:bf:cb:5c:44:4c:7c:31: 92:3e:9e:0e:1c:68:c6:d9:20:cf:43:28:cb:8d:1d: 08:59:c1:ce:db:3e:28:05:dd:dc:44:e3:6f:76:db: 8c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2A:B7:8A:A4:5A:76:6B:8B:05:91:E1:0C:A1:18:9A:83:D5:01:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab7e21f3-04aa-3cda-8a36-20b4225862e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:29:46:79:b1:61:ae:49:9f:89:2a:bc:c3:c4:f0:96:5d:e8: 14:fe:6c:0c:25:88:71:be:f9:09:7b:74:e8:14:4d:12:a9:cf: e0:66:8a:72:e5:2c:e0:10:fb:2f:40:a5:24:0f:cb:bf:08:e2: ff:76:bd:76:c1:bd:ad:88:cf:d1:ee:98:3b:84:87:b3:e7:4a: e8:4b:cc:9b:a9:be:23:c3:dd:d3:f7:46:4d:2e:f8:dd:e3:8b: 9d:4b:40:4b:d4:6b:77:48:88:01:31:8e:77:d8:b1:ad:d4:91: 9e:f6:9a:ea:37:2d:b8:6e:cb:ac:a1:39:69:c0:76:b0:bc:81: 31:24:12:02:6b:14:65:71:3d:2a:b2:95:32:18:3b:5e:a7:5f: 53:1b:72:01:e6:5d:89:e7:97:31:dc:cd:d1:78:fd:36:6f:44: 53:c4:b1:cf:ee:76:d8:c0:b1:7d:d9:a6:15:5b:14:1e:ec:75: 04:8d:20:7f:f7:b1:4b:5f:f0:e7:2a:49:ad:99:99:63:bc:88: bb:37:e9:09:cf:a6:4b:24:5c:d5:fe:e8:85:e2:ed:5f:6f:fa: bd:4e:5b:c2:97:e4:50:2e:7d:79:8c:69:20:69:24:4a:35:be: 95:14:97:37:8a:3b:0d:4c:81:a5:90:c9:38:f6:79:7d:08:c2: f2:0e:58:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZ1j6mbIJ/FvJyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NDAwYTk2NDAtMzg4MS00YjBiLWFiNjQtMjA4ZmMwMmU2YjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbmX8NBKih2sJ/yQdaH27WayOBUmx7zp/dKO NaJ0B5yONltPfXUBWAAe2Kd4wDbohdA73AnKN2K1q4OzR32t05DAtRBzxCpOiIb5 dwfwNu4RaTpm0jyIth5i1llH/obHGjzntgxWRZym0coFhxbxH0gdYAMgpYIOExbT LGfD0q/sc3q0Il+5F5JAkuOpFe2ce/h/VqhsBir3xtCU5YeYEJhhMvft2fnGX3js 1rXzfb75NULTglbT+29oza5Qd84DumjKbmbhhJYouHp2GlTz/bWLyEcH8xBeEL/L XERMfDGSPp4OHGjG2SDPQyjLjR0IWcHO2z4oBd3cRONvdtuMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAqt4qkWnZriwWR4QyhGJqD1QGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWI3ZTIxZjMtMDRhYS0z Y2RhLThhMzYtMjBiNDIyNTg2MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIpRnmxYa5Jn4kqvMPE8JZd6BT+bAwliHG++Ql7dOgUTRKpz+BminLl LOAQ+y9ApSQPy78I4v92vXbBva2Iz9HumDuEh7PnSuhLzJupviPD3dP3Rk0u+N3j i51LQEvUa3dIiAExjnfYsa3UkZ72muo3Lbhuy6yhOWnAdrC8gTEkEgJrFGVxPSqy lTIYO16nX1MbcgHmXYnnlzHczdF4/TZvRFPEsc/udtjAsX3ZphVbFB7sdQSNIH/3 sUtf8OcqSa2ZmWO8iLs36QnPpkskXNX+6IXi7V9v+r1OW8KX5FAufXmMaSBpJEo1 vpUUlzeKOw1MgaWQyTj2eX0IwvIOWHA= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:28 2025 by rpki-client